Dell 6.2 Configuring 802.1X Auth entication

209| 802.1X Auth entication DellPowerConnect W- Series ArubaOS 6.2 | User Guide
Ont he controller,you add the configured server (IAS1) into a server group.For the server group, you configure the
serverrule that allows the Class attribute returned by the serverto set the user role.
In the WebUI
1. N avigate to the Configuration > Security > Authentication > Servers page.
2. I n the Serverslist, select Radius Server.I n the RADIUS Server Instance list, enter IAS1 and click Add.
a. Select IAS1 to display configuration parameters for the RADIU S server.
b. For I P Address, enter 10.1.1.21.
c. For Key, enter |*a^t%183923!.(You must enter the key st ringt wice.)
d. Click Apply.
3. I n the Serverslist , select ServerGroup. In the Server Group Instance list, enter IAS and click Add.
a. Select the servergroup IAS to display configuration parameters for the server group.
b. Under Servers, click New.
c. From the ServerName drop-down menu, select IAS1. Click Add Server .
4. U nderServer Rules, click New.
a. For Condition, enter Class.
b. For A ttribute, select value-of fromt hedrop-down menu.
c. For Operand,select set role.
d. Click Add.
5. Click A pply.
In the CLI
(host)(config) #aaa authentication-server radius IAS1
host 10.1.1.21
key |*a^t%183923!
(host)(config) #aaa server-group IAS
auth-server IAS1
set role condition Class value-of
Configuring 802.1X Auth entication
An AAA profile specifies the 802.1X authentication profile and 802.1x server group to be used for authenticating
clients for a WLAN. The AAA profile also specifies t he defaultuser roles for 802.1X and MAC authentication.
In the 802.1X authentication profile, configure enforcement of machine authentication before user authentication. If
a user attempts to log in without machine authentication taking place first, the user is placed in the limited guest
role.
In the WebUI
1. N avigate to the Configuration > Security > Authentication > L2 Authentication page.
2. Select 8 02.1X Authentication Profile.
a. At the bottom of the Instance list, enter dot1x, t henclick A dd.
b. Select the profile name you just added.
c. Select Enforce Machine Authentication.
d. For the Machine Authentication: Default Machine Role, select computer.
e. For the Machine Authentication: Default User Role, select guest.
f. Click Apply.